https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101965#M26347 <P>Solved using bucket _time span=3h | eval _time=strftime(_time,"%H")</P> Mon, 28 Sep 2020 14:24:10 GMT HelpMePlease 2020-09-28T14:24:10Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101960#M26342 <P>I had a x-axis displayed over date_hour. 00,01,02... Is is possible to change it to display on a 3hour basis (00,03,06). </P> <P>My search query </P> <PRE><CODE>sourcetype="CurrentWeatherSGMap" Message="Yishun" earliest=@d latest=-0m@m | eval 24-hour=strftime(_time,"%H") | eval Description=case(current_summary="Cloudy", "Fair",current_summary="Rain", "Poor",current_summary="Showers","Poor",current_summary="Passing Showers","Poor",current_summary="Thundery Showers","Poor", current_summary="Partly Cloudy", "Excellent") | chart dc(Description) over 24-hour by Description | eval Fair=if(Excellent==1,"1",Fair) | eval Poor=if(Description==Poor, "1", "1") </CODE></PRE> Sun, 21 Jul 2013 04:52:08 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101960#M26342 HelpMePlease 2013-07-21T04:52:08Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101961#M26343 <P>You can make a timechart. Something like..</P> <P>search... | timechart span=3h count</P> Sun, 21 Jul 2013 05:27:45 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101961#M26343 clymbouris 2013-07-21T05:27:45Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101962#M26344 <P>If I have a chart, how can I do that ?</P> Sun, 21 Jul 2013 13:35:54 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101962#M26344 HelpMePlease 2013-07-21T13:35:54Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101963#M26345 <P>Use bucket _time span=3h</P> Sun, 21 Jul 2013 14:43:35 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101963#M26345 linu1988 2013-07-21T14:43:35Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101964#M26346 <P>thanks !!!</P> Sun, 21 Jul 2013 14:54:07 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101964#M26346 HelpMePlease 2013-07-21T14:54:07Z https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101965#M26347 <P>Solved using bucket _time span=3h | eval _time=strftime(_time,"%H")</P> Mon, 28 Sep 2020 14:24:10 GMT https://community.splunk.com/t5/Splunk-Search/x-axis-to-display-3hours-interval/m-p/101965#M26347 HelpMePlease 2020-09-28T14:24:10Z